This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: 8DzsHCjZxtokLURTU9FYa7vQfRtf3wpXFbb91dT/KAg= Subject key identifier: 85:A6:4B:65:9A:20:40:C4:11:39:F2:9D:9B:B5:5C:23:36:B9:64:CD Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 0146 Signing time: Mon 29 Dec 2025 03:35:38 +0000 Manifest this update: Mon 29 Dec 2025 03:35:38 +0000 Manifest next update: Mon 05 Jan 2026 03:35:38 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: fDtCo8WOZ6UOGNq1Sycz7Vi75Hf/lsDUTF/MNdFbIjo=) 2: 145B3B88C46B11F085C51F82C4F9AE02.roa (hash: J9CnTUyePYPB90BlLPftIH1AYzCyvJxP8FcjWilMdvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 03:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Dec 29 03:35:38 2025 GMT Not After : Jan 5 03:35:38 2026 GMT Subject: CN=6951f70a-9b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:a4:d2:59:bf:17:e2:e0:20:2b:55:40:97: 26:7b:54:01:d1:b8:bb:1a:1b:23:40:09:d5:63:dc: ee:00:66:39:7c:17:23:74:b7:bd:06:69:a6:9c:51: 45:42:f3:67:89:06:29:24:7d:4b:83:6d:c0:c0:c2: b0:6b:1a:e6:6d:e9:47:d1:99:48:3a:74:1a:49:e5: 38:de:40:62:7a:9c:b5:80:fe:fe:c9:27:3a:19:49: 3f:b5:a8:0d:5c:fb:a4:47:15:a6:73:09:32:56:15: 66:10:fe:47:31:cb:1e:25:6f:d1:e2:85:3d:73:2a: f1:c3:2f:86:2e:39:f4:12:0a:53:68:71:3c:06:70: c0:3e:53:c4:10:80:a9:2e:60:a2:1d:98:5c:b7:31: dc:09:f9:96:4c:32:e5:55:b7:10:33:85:48:f7:07: 5c:0a:ca:17:56:29:ed:99:59:5f:72:a9:a0:99:97: 2a:35:fa:76:5d:83:b2:02:22:11:8d:98:ab:bb:87: d7:e1:e1:73:45:71:a8:83:0e:29:67:0d:73:f8:4f: 5c:31:0a:61:f0:00:75:6a:01:13:39:fa:6c:2f:96: cc:c3:bf:da:b3:18:33:da:fa:aa:ee:7b:13:96:dd: ea:6a:83:93:6d:bf:07:8f:b9:2e:e4:86:6c:f2:50: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A6:4B:65:9A:20:40:C4:11:39:F2:9D:9B:B5:5C:23:36:B9:64:CD X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:58:d2:76:cd:c7:54:a4:38:69:9c:50:6c:22:cc:d6:14:24: f1:55:eb:53:dd:cf:9f:cc:60:7d:44:80:06:c3:28:a6:db:0d: 6d:e8:79:ea:18:14:78:2f:ab:4e:4f:87:aa:e0:f2:70:47:31: da:93:fc:59:4f:7c:3c:10:ad:f4:f2:ab:cc:c0:18:36:bf:2b: ed:70:00:7a:45:25:69:4d:51:60:f0:64:b5:f8:8b:fb:14:b7: 38:4e:2f:48:5f:2a:e2:f7:9a:75:ff:fc:99:54:6f:8a:4d:27: f1:53:3f:98:9c:4f:e0:4f:3c:9d:39:7b:b8:25:e4:db:ad:cc: 45:e4:a7:95:cb:f9:b3:8c:71:19:24:aa:ec:9b:a9:90:43:d9: 18:f0:d5:0d:4d:f8:86:db:a9:dd:99:54:66:04:0b:0f:c7:8e: 14:99:2d:bb:6f:c6:b6:ca:2f:24:71:70:37:fc:71:a7:d1:f7: f9:69:39:a6:a0:ea:9c:c9:57:2b:4a:99:4e:06:33:aa:50:d0: f4:4f:f9:9a:d1:96:69:30:d3:b5:75:8f:c9:62:77:a2:70:86: 76:80:8a:42:7c:b4:92:7b:42:34:72:fe:32:01:8d:91:82:4d: d1:1f:6f:6a:42:30:e8:73:5b:e7:71:c3:b3:cc:b4:91:19:76: dd:e1:bd:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUxMjI5MDMzNTM4WhcNMjYwMTA1MDMzNTM4WjAYMRYwFAYD VQQDDA02OTUxZjcwYS05YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5ek0lm/F+LgICtVQJcme1QB0bi7GhsjQAnVY9zuAGY5fBcjdLe9BmmmnFFF QvNniQYpJH1Lg23AwMKwaxrmbelH0ZlIOnQaSeU43kBiepy1gP7+ySc6GUk/tagN XPukRxWmcwkyVhVmEP5HMcseJW/R4oU9cyrxwy+GLjn0EgpTaHE8BnDAPlPEEICp LmCiHZhctzHcCfmWTDLlVbcQM4VI9wdcCsoXVintmVlfcqmgmZcqNfp2XYOyAiIR jZiru4fX4eFzRXGogw4pZw1z+E9cMQph8AB1agETOfpsL5bMw7/asxgz2vqq7nsT lt3qaoOTbb8Hj7ku5IZs8lAUkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWmS2Wa IEDEETnynZu1XCM2uWTNMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnWNJ2zcdUpDhpnFBsIszWFCTxVetT3c+fzGB9RIAGwyim2w1t6Hnq GBR4L6tOT4eq4PJwRzHak/xZT3w8EK308qvMwBg2vyvtcAB6RSVpTVFg8GS1+Iv7 FLc4Ti9IXyri95p1//yZVG+KTSfxUz+YnE/gTzydOXu4JeTbrcxF5KeVy/mzjHEZ JKrsm6mQQ9kY8NUNTfiG26ndmVRmBAsPx44UmS27b8a2yi8kcXA3/HGn0ff5aTmm oOqcyVcrSplOBjOqUND0T/ma0ZZpMNO1dY/JYneicIZ2gIpCfLSSe0I0cv4yAY2R gk3RH29qQjDoc1vnccOzzLSRGXbd4b2d -----END CERTIFICATE-----Generated at Wed Dec 31 00:09:25 2025 by rpki-client